Elliot Marshall

    Technology executive. Writer. Curious about how things work.

    I write about technology, risk, transformation, leadership and basketball, sometimes separately and sometimes where they overlap. I have spent 15 years in technology risk, cybersecurity and financial services.

    Read the Writing
    Current Focus

    Today

    My work started in cybersecurity operations and now sits in enterprise technology leadership, managing risk, strengthening regulatory readiness and helping large technology organizations run reliably.

    AI Governance

    Shaping responsible AI adoption and risk frameworks for enterprise technology organizations.

    Regulatory Risk

    Driving compliance and risk management across technology business units.

    Enterprise Technology

    Overseeing end-user computing and enterprise applications at scale.

    Marshall Elliot

    About Elliot

    I lead technology risk and cybersecurity programs for Fortune 500 financial institutions. That covers cyber operations, incident response and enterprise risk governance. Most of the work is helping large organizations operate securely and stay ahead of what regulators expect.

    I have directed major incidents on two continents and built security programs from scratch, including in places where the tooling was thin and discipline mattered more than technology.

    My path into this was unconventional. I started behind the counter of a small financial institution in Michigan, then moved to Australia on a one-way ticket. That experience still shapes how I work today. I stay calm, use good judgment and give teams stability when the stakes are high.

    I listen first, cut the complexity down and focus on what teams actually need to do the work. Strong operations require discipline. Strong leadership requires humanity.

    I write for the same reason I watch a lot of basketball film: I want to know why something worked.

    Career

    Experience

    Bank of America

    2026 – Current

    Charlotte

    EY US

    2021 – 2026

    Seattle & Chicago

    EY Australia

    2017 – 2021

    Melbourne

    EY US

    2014 – 2017

    Chicago

    Track Record

    Impact

    Transformed Enterprise Risk Governance

    Fortune 100 financial institution

    Unified fragmented risk programs across business units into a coherent enterprise framework. Regulatory findings decreased by 60% within 18 months.

    60% regulatory finding reductionEnterprise-wideMulti-BU governance

    Rebuilt Security Operations from Foundation

    Global financial services

    Transformed underperforming SOC into mature operation. Detection coverage increased to 100% of critical applications; MTTD reduced by 40%.

    40% MTTD reduction100% critical coverage30% maturity uplift

    Led High-Stakes Incident Response

    Critical infrastructure, APAC & Americas

    Directed incident response across two continents during active threats. Established command structure that became organizational standard.

    24x7 global coverageCross-border coordination95% exam remediation

    Pioneered AI Governance Framework

    Regulated financial environment

    Established the organization's first comprehensive AI risk framework, enabling responsible adoption while meeting regulatory expectations ahead of enforcement timelines.

    First-of-kind frameworkCross-functional alignmentProactive compliance

    Professional certifications

    CISSP·CISM·CIPT·GCIH·GCIL·GCLD·GSOM
    Contact

    Get in Touch

    I'm open to speaking, advisory conversations and select consulting work in technology risk, cybersecurity and transformation. If you're working on something this background fits, reach out.